Mailing List Archive: Apache: Bugs

[Bug 45959] SSI include ignores SymlinkIfOwnerMatch directive

Index | Next | Previous | View Threaded

bugzilla at apache

Dec 30, 2008, 7:27 PM

Post #1 of 6 (573 views)
Permalink

[Bug 45959] SSI include ignores SymlinkIfOwnerMatch directive

https://issues.apache.org/bugzilla/show_bug.cgi?id=45959

--- Comment #14 from Nick Kew <nick [at] webthing> 2008-12-30 19:27:04 PST ---
OK, I've just had a good hack at this, and I can reproduce the problem. It
seems "Options" values are completely ignored in subrequests, so it never tests
for symlinks, let alone if owner matches. That applies both to file and
virtual/uri lookups.

Please bug me if I don't apply your patch or something equivalent within a
week. Thanks for persisting with the report!

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Jan 6, 2009, 2:48 PM

Post #2 of 6 (516 views)
Permalink

[Bug 45959] SSI include ignores SymlinkIfOwnerMatch directive [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=45959

--- Comment #15 from Paul B. Henson <henson [at] acm> 2009-01-06 14:48:45 PST ---
Thanks, I appreciate the acknowledgment that this is a valid bug. All my patch
does is disable the caching, which might not be the best thing to do. I didn't
have the time to familiarize myself with the code enough to see if there was a
way to cache while still respecting options. If there isn't, then getting rid
of the caching might be the only secure approach.

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Jan 6, 2009, 3:22 PM

Post #3 of 6 (518 views)
Permalink

[Bug 45959] SSI include ignores SymlinkIfOwnerMatch directive [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=45959

Bob Ionescu <bobsiegen [at] googlemail> changed:

What |Removed |Added
----------------------------------------------------------------------------
URL| |FixedInTrunk

--- Comment #16 from Bob Ionescu <bobsiegen [at] googlemail> 2009-01-06 15:22:30 PST ---
There's a propose for backporting patches which have been applied to trunk some
time ago, see r732133 ( https://svn.apache.org/viewcvs.cgi?view=rev&rev=732133 )

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Jan 6, 2009, 3:22 PM

Post #4 of 6 (513 views)
Permalink

[Bug 45959] SSI include ignores SymlinkIfOwnerMatch directive [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=45959

Bob Ionescu <bobsiegen [at] googlemail> changed:

What |Removed |Added
----------------------------------------------------------------------------
URL|FixedInTrunk |
Keywords| |FixedInTrunk

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Jan 7, 2009, 3:52 PM

Post #5 of 6 (501 views)
Permalink

[Bug 45959] SSI include ignores SymlinkIfOwnerMatch directive [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=45959

--- Comment #17 from Paul B. Henson <henson [at] acm> 2009-01-07 15:52:49 PST ---
Based on my inexpert review, the referenced patch does look like it would
resolve the problem. I look forward to its inclusion :).

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Jan 12, 2009, 6:50 AM

Post #6 of 6 (468 views)
Permalink

[Bug 45959] SSI include ignores SymlinkIfOwnerMatch directive [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=45959

Nick Kew <nick [at] webthing> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|REOPENED |RESOLVED
Resolution| |FIXED

--- Comment #18 from Nick Kew <nick [at] webthing> 2009-01-12 06:50:25 PST ---
Fix backported in r733754 ( https://svn.apache.org/viewcvs.cgi?view=rev&rev=733754 )

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads